General
-
Target
2b18c0755ae564abafc36b02742014f9_JaffaCakes118
-
Size
337KB
-
Sample
240329-yffagsgh58
-
MD5
2b18c0755ae564abafc36b02742014f9
-
SHA1
36fbb007183250cc9ace71d8e2469310ca1416e7
-
SHA256
d32f57ddf4d662f0e217ea3c15f254aa70e052626e96b3da6c6017f7b3807fc4
-
SHA512
96562fc35fc0810660d542ce1c4d020c63efeb58bcb8bd1800c5054f10e28d828a13303bbb2d1b9b019e19bd4b6e6b64baea870f2794a4a19e61a8d6787011be
-
SSDEEP
6144:ygW3mN9IWTLJeLqd2cXu87tAN6f9EDFqYqwsK6agxYc:w2UWTLJMqd1+87tAUfGqYqwsJacYc
Static task
static1
Behavioral task
behavioral1
Sample
2b18c0755ae564abafc36b02742014f9_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2b18c0755ae564abafc36b02742014f9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
smokeloader
2020
http://fazanaharahe10.top/
http://xandelissane20.top/
http://ustiassosale30.top/
http://cytheriata40.top/
http://ggiergionard50.top/
Targets
-
-
Target
2b18c0755ae564abafc36b02742014f9_JaffaCakes118
-
Size
337KB
-
MD5
2b18c0755ae564abafc36b02742014f9
-
SHA1
36fbb007183250cc9ace71d8e2469310ca1416e7
-
SHA256
d32f57ddf4d662f0e217ea3c15f254aa70e052626e96b3da6c6017f7b3807fc4
-
SHA512
96562fc35fc0810660d542ce1c4d020c63efeb58bcb8bd1800c5054f10e28d828a13303bbb2d1b9b019e19bd4b6e6b64baea870f2794a4a19e61a8d6787011be
-
SSDEEP
6144:ygW3mN9IWTLJeLqd2cXu87tAN6f9EDFqYqwsK6agxYc:w2UWTLJMqd1+87tAUfGqYqwsJacYc
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-